From owner-freebsd-questions@FreeBSD.ORG Sat Apr 17 11:30:09 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3598716A4CE for ; Sat, 17 Apr 2004 11:30:09 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6084443D1D for ; Sat, 17 Apr 2004 11:30:08 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1])i3HITv4l091042 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 17 Apr 2004 19:29:57 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)id i3HITv9l091041; Sat, 17 Apr 2004 19:29:57 +0100 (BST) (envelope-from matthew) Date: Sat, 17 Apr 2004 19:29:56 +0100 From: Matthew Seaman To: Chuck Swiger Message-ID: <20040417182956.GB90463@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , Chuck Swiger , Warren Block , questions@freebsd.org References: <20040416215610.Y1689@wonkity.com> <408170DB.3070201@mac.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="QTprm0S8XgL7H0Dt" Content-Disposition: inline In-Reply-To: <408170DB.3070201@mac.com> User-Agent: Mutt/1.5.6i X-Virus-Scanned: clamd / ClamAV version devel-20040416, clamav-milter version 0.70g X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk cc: questions@freebsd.org Subject: Re: Milter Logging X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Apr 2004 18:30:09 -0000 --QTprm0S8XgL7H0Dt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Apr 17, 2004 at 02:00:59PM -0400, Chuck Swiger wrote: > Warren Block wrote: > >What do people do for milter logging? A MAILER-DAEMON message for every > >virus caught by clamav-milter is a little annoying (both to the intended > >recipient and to postmaster), but I'm hesitant to just discard them. clamav-milter logs what it does to syslog very effectively. The warning messages to postmaster aren't really necessary but for a low traffic site, they do give you some vicarious pleasure for a while. =20 > Well, the standards (RFC-822/2822) are clear, but with the dawn of viruse= s=20 > that forge sender addresses, creating bounces for viruses doesn't really = do=20 > anybody much good, either. >=20 > Refusing to accept viral mail is the best option if you can; failing that= ,=20 > I discard such messages. Frankly, I gave up bouncing viral mail after I= =20 > got tired of answering complaints when someone got a bounce from a=20 > forgery... Yes -- rejecting the messages at the SMTP DATA stage is the way to go. Not that the virus mailers take the slightest bit of notice: half the time they've dropped the connection by the time the AV filter has done its thing. It's much more effective against spam e-mailers. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --QTprm0S8XgL7H0Dt Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAgXekdtESqEQa7a0RAofSAJ9nNOH3q78F97Xoe53iTwXxzcg62wCcCLME fyOP1OC7HQ6V6oGthVcJcik= =0NR3 -----END PGP SIGNATURE----- --QTprm0S8XgL7H0Dt--